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The idealized Kish-Sethuraman (KS) cipher is theoretically known to offer perfect security through 
a classical information channel. However, realization of the protocol is hitherto an open problem, 
as the required mathematical operators have not been identified in the previous literature. A 
mechanical analogy of this protocol can be seen as sending a message in a box using two padlocks; 
one locked by the Sender and the other locked by the Receiver, so that theoretically the message 
remains secure at all times. We seek a mathematical representation of this process, considering 
that it would be very unusual if there was a physical process with no mathematical description and 
indeed we find a solution within a four dimensional Clifford algebra. The significance of finding a 
mathematical description that describes the protocol, is that it is a possible step toward a physical 
realization having benefits in increased security with reduced complexity. 

PACS numbers: 02.10.-v, 02.40.Gh, 89.70.-a, 89.70.-a 



Various schemes exist to maintain secure information 
channels that exploit physical phenomena such as quan- 
tum effects [TJ |5] (eg. indeterminacy, entanglement) or 
even classical chaos [2H1]- All existing schemes involve, 
one way or another, the sharing or exchange of a crypto- 
graphic key. The open question we address in this paper 
is: can secure transmission be achieved without any form 
of key exchange? And if so, which physical property of 
nature can be exploited to achieve this? 

The Kish-Sethuraman cipher (KS-cipher) is an ideal- 
ized protocol that achieves the goal of avoiding key ex- 
change [SHI]. However, this protocol has not yet been 
realized, as the appropriate physical property, with a 
supporting mathematical description, has not yet been 
identified. In this paper we show that classical opera- 
tions on a Clifford space remarkably possess the required 
mathematical properties and we develop an appropriate 
ansatz based on Clifford algebra. 

First, let us briefly review how the Kish-Sethuraman 
cipher protocol works, using a mechanical analogy. Sup- 
pose Bob wishes to transmit a written message to Alice; 
Bob hides the message in a box that he securely padlocks 
before sending it to Alice. After receiving the box, Alice 
adds a second padlock and sends the box back to Bob. 
Then Bob unlocks his padlock, leaving the box still se- 
cured by Alice's lock, and sends it back to Alice who can 
then remove her lock, open the box and read the message 
as shown in Fig. [T] 

This KS-cipher protocol is perfectly secure because 
both Bob and Alice keep their keys undisclosed so that at 
all times the box is locked by at least one padlock, thus 
no information is leaked or shared [BJ. Hence we can say 
that in the physical world, a completely secure classical 
protocol is conceptually possible. In practice, a physical 
box can be broken, however, what is important to our 
analysis is the security of the lock protocol. This phys- 
ical example is clearly classical and so we would expect 
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FIG. 1: The double padlock protocol of Kish and Sethuraman. 
Bob firstly locks the box and sends it to Alice. Then, once 
received, Alice also padlocks the box with a second lock and 
sends it back to Bob. Finally, Bob unlocks his padlock, and 
sends the box back to Alice who can then remove her lock, 
open the box, and read the message. The message appears 
perfectly secure because at all times it has been secured by 
at least one lock. 



that there would be a mathematical model to describe 
this process. That is, it would seem strange if there was 
such a simple physical scenario for which there was no 
counterpart in the mathematical world and so would run 
counter to general trend of the success of mathematics 
in describing the physical world. This then underlies the 
motivation for expecting that a mathematical description 
might indeed be feasible. 

The significance of a mathematical protocol simulating 
the double-padlock problem is that it would potentially 
be the underpinnings of a relatively simple method of 
avoiding key exchange for secure information transmis- 
sion. 

Firstly we note that the ordering of the padlocks com- 
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mutes. That is Alice and Bob can take off or add their 
padlock in any order, which is the primary aspect of the 
protocol that permits it to work and hence we are looking 
to hnd two mathematical operations that can be applied 
by Alice and Bob that commute. We can immediately 
identify an example of this in the case of two-dimensional 
rotations. 

For example, the message Bob wants to secretly send 
could be the value 9. Bob 'hides' 9 by adding a random 
angle 4>i (his 'key') to it and sends it to Alice. Then Al- 
ice adds another random angle <f>2 (her 'key') and sends 
it back to Bob. Then Bob undoes his secret rotation 
4>i and returns the message to Alice. Then Alice un- 
does her rotation <p2 and recovers the original value of 
9. These operations are most elegantly analyzed in two- 
dimensional geometric algebra, where we have a message 
vector m = m\G\ + m-iei, using e\ and ei as orthogonal 
basis elements and producing the bivector iota I — e\ei- 
Acting on the message vector with a rotor R = e 1 */ 2 
produces a rotated vector 

m' = i?m7? = c^/ 2 me-^ /2 , (1) 

where m' = m[ei + m 2 e 2 an d where we have defined 
the reversion operation, which inverts the order of all 
algebraic products, that is, R — e _t */ 2 . Therefore </> in 
this case represents the private key and rotates the vector 
m by a clockwise angle <j). In two dimensions, we can 
combine the two sides of the rotation operator because 
l anticommutes with both e\ and e2 within the vector 
m, so that m' = e'^m. Refer to the Appendix for a 
brief summary of these operations that utilize geometric 
algebra. Therefore, after the operations by Alice and Bob 
we find 

m fina i = R A R B R A R B m = R A R A R B R B m = m, (2) 

where because the rotation operators commute and 
RaRa = RbRb = 1, we recover the initial message. 
The message (the angle with the e\ axis say) can be re- 
covered from cos 9 = m • ei/|m|, where the vector length 
|m| = v m 2 . 

While this process indeed hides the message at each 
stage, an eavesdropper, Eve, by comparing the succes- 
sive intermediate transmissions, can deduce the inter- 
mediate rotations and hence discover the two keys (<pi 
and <p2) thereby unlocking the message. That is, inter- 
cepting two consecutive transmissions, which consist of 
two-dimensional vectors, Eve can easily calculate the ro- 
tation angle between them from m 2 = e'^nii, which can 
be rearranged to give e L ^ = m 2 m^ 1 . The inverse of a 
vector being easily calculated when it is represented in 
geometric algebra, as shown in the Appendix. 

In an attempt to circumvent the vulnerability of two- 
dimensional rotations, we can consider more general op- 
erators using two-dimensional multivectors 

M = a + v + Lb, (3) 



where a and b are scalars, i is the bivector and a pla- 
nar vector v = v\e.\ + t>2e2- That is A^ 2 i s tne exterior 
algebra of 5ft 2 which produces the space of multivectors 
5ft © 5ft 2 © /\ 2 !K 2 , a four-dimensional real vector space de- 
noted by C72,o(ift)- We now have the encryption process 

m final = M A M B M A M B iaM B M A M B M A , (4) 

where the f operation is an inverse operation, not nec- 
essarily the reversion operation, such that M A M A = 
M B M B = 1. The first message sent by Bob to Al- 
ice is then mi = M B mM B , who then returns ni2 = 
M A M B mM B M A which Bob then sends back to Alice 
as 1113 = M B M A M B mM B M A M B , who can then decode 
the message as shown in Eq. Q. 

So, seeking commuting operators M A and M B , that is 
M A M B - M B M A = we require 

(a + v + Lb) (c + w + id) — (c + w + id) (a + v + Lb) 
= 2v A w - 2tdv + 2ifow = 0. (5) 

We therefore require v and w to be parallel, and so we 
need to select a preferred direction for the protocol during 
handshaking, say the direction e\. Hence Alice and Bob 
can utilize multivectors 

M A = a + ve\ + lv , M B = b + we\ + lw (6) 

that when normalized can be written as M A — e vei+LV 
and M B = c wei+LU \ and defining M\ = e - vei - LV and 
M B = e-^i-" , we have M A M A = M B M B = 1. The 
one degree of freedom in the operator is insufficient to 
ensure security of the two-dimensional message vector 
and so we need to seek a solution in higher dimensions. 

In three dimensions, we have a message vector m = 
m\e\ + 777.2^2 + mzez and define the trivector i = e\e^ez 
that commutes with all variables with i 2 = (e^ea) 2 = 
-1. 

We can write general three-dimensional multivector 
operators for Alice and Bob as 

M A = a + v + ir + ib, M B = c + w + is + id (7) 

where v and r are three- vectors. This is the space of 
multivectors 5ft©5ft 3 ©A 2 5ft 3 ©A 3 

an eight-dimensional 
real vector space denoted by Cl 3 ^(dt). We now seek M A 
and M B to be commuting in order to use the procedure 
in Eq. Q, requiring 

= M A M B — M B M A (8) 
= 2(v A w — r A s) + 2i(v A s + r A w), 

and to make this commutator vanish we can select w = 
vl = vie% and s = yl = rie^, with the vectors now 
planar in order to anticommute with e%, so we define 
V12 = V\ex + i>2e2. We could have selected a general 
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direction, in place of the direction e 3 , however this di- 
rection needs to be shared publicly, and so without loss 
of generality we can select the e 3 direction. That is, we 
have the commuting operators 

M A = ( a + via + e 3 vi 2 + i&) = e*<M 1+e3 ) Xl2 (9) 
M B = (c+ W12 + e 3 w 12 + id) = e*e (1+e3)yi2 , 

which we have written in an exponential form to guaran- 
tee normalization with planar vectors x 12 and yi 2 , with 
the encrypted message for Alice, for example, given by 

m' = M A mM A . (10) 

However, we can see that the leading phase term in the 
operator commutes through the message vector m and so 
leaves only two degrees of freedom available to encrypt 
the message, insufficient to stop an eavesdropper. 

This can also be understood through the example of 
general three dimensional rotations. In this case we ro- 
tate a unit vector (with two degrees of freedom) through 
an action by the rotor (consisting of a rotation axis with 
two degrees of freedom) and a rotation angle giving a 
total of three degrees of freedom. We can see that with 
the knowledge of the start and final vectors, we can not 
determine the full details of the rotor. However in three 
dimensions rotations do not commute and so it appears 
that we need to implement some form of rotation within 
a higher four dimensional space. 

Hence, we need to explore if the scheme can work in 
four dimensions. In four dimensions we have the space of 
multivectors $ ® ^ ® /\ 2 ft 4 ® f\ 3 $l 3 ® f\ A ft 4 , a, sixteen- 
dimensional real vector space denoted by CI4.0QR). We 
select a message four-vector m = m\e 4 + m 2 e 2 + m 3 e 3 + 
m 4 e 4 and we define the quadvector / = eie 2 e3e4 that 
anticommutes with all vectors and has a positive square. 
Now, requiring M a Mb = MbMa, after some algebra de- 
tailed in the Appendix, we find four types of commuting 
multivectors, and the type describing pure rotations in 
four dimensions produce the commuting operators 

M A = a + e 4 (v - Iv) , M B = b + e 4 (p + Ip), (11) 

where v, p are four- vectors. We thus have four degrees 
of freedom for the private keys for both Alice and Bob 
respectively, as the values of a and b are fixed by the 
requirement of normalization. In order to reveal more 
clearly that these operators lie on the even subalgebra, 
we can write the operator for Alice, for example, as 

M A = (a + v 4 ) +e 4 v + iv + Iv 4 , (12) 

where v = v + v 4 e 4 . Because the operators lie on the 
even subalgebra we can encrypt the messages using the 
reversion operation, with 



which maps from unit four-vectors to unit four-vectors. 
Hence Eve needs to discover the private key v with 
four degrees of freedom, whereas m' and m are the in- 
tercepted intermediate message unit four-vectors having 
three degrees of freedom. Hence we find a similar sit- 
uation to that found for rotations in three dimensions 
discussed earlier, where the rotation axis cannot be de- 
termined given the initial and final vectors, but this time 
in four dimensions with an unknown rotation plane. 

In this paper, for the first time, we provide a 
set of working mathematical operators for the Kish- 
Sethuraman (KS) cipher that is a classically secure proto- 
col. Our solution requires the use of the space of Clifford 
multivectors, we find a viable solution in four dimensional 
space, and future exploration in dimensions higher than 
four may be of fundamental interest. 

The encoding of these multidimensional operations 
onto real signals remains an open question for further 
study, and it is worth noting that various multidimen- 
sional spaces are already exploited by engineers in stan- 
dard communications theory, for example see |S]. 

Whilst it is of interest for future work to explore how 
to physically encode higher dimensional rotations on a 
wireless carrier signal, the scheme we have developed has 
wider implications. For example, Klappenecker has con- 
jectured a connection between a mathematical realization 
of the KS-cipher protocol and the P versus NP problem 
in computer science Thus it may be of interest to 
explore implications of the KS operations developed in 
this paper on the P versus NP problem. 

If our mathematical protocol can be encoded on a wire- 
less carrier or fiber optic signal, a benefit would be secure 
communication without key exchange and the promise of 
a relatively simple physical realization. 

APPENDIX 
Geometric algebra representation of vectors 

In order to represent the three independent degrees of 
freedom of space, Clifford defined an associative algebra 
consisting of three elements e±, e 2 and e$, with the prop- 
erties 

4 = 4 = 4 = 1 (14) 

but with each element anticommuting, that is ejCk = 
—tk&j, for j ^ k. We also define the trivector i = eie 2 e3, 
which allows us to write e 2 e3 = ie\, e 3 e\ — ie 2 and 
eie 2 = ie 3 . 

Now, given two vectors a = a\e\ + a 2 e 2 + 0363 and 
b = biei + fe 2 e 2 + 6363, using the distributive law for 
multiplication over addition jS], as assumed for an alge- 
braic field, we find their product 



m' = MmM, 



(13) 



ab = 



(aiei + a 2 e 2 + a 3 e 3 )(6iei + b 2 e 2 + b 3 e 3 ) (15) 
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= a 1 b 1 + a 2 b 2 + a 3 b 3 + (a 2 b 3 - a 3 b 2 )e 2 e 3 
+ (a 3 bx - aib 3 )e 3 ei + (aib 2 - a 2 &i)eie 2 , 

where we have used the elementary properties of e\, e 2 , e 3 



defined in Eq. ( 14 1. Recognizing the dot and wedge prod- 



ucts, we can write 



ab = a • b + a A b. 



(16) 



,2 _ 



We can see from Eq. (|15|, that the square of a vector 

4, 



aa 



-a 2 +a 3 , becomes a scalar quantity. Hence 



the Pythagorean length of a vector is simply |a| 
and so we can find the inverse vector 



a^ 



a 1 = 



(17) 



These results can easily be adapted for a space of any 
number of dimensions. 



that implies x = ±y and r = =Fs. We then will find 
that the vector and trivector conditions are satisfied as 
well provided x = — v' and r = p, where v' = e 4 ve 4 = 
—V\ei — v 2 e 2 — v 3 e 3 + v 4 e 4 . This then gives two commut- 
ing multivcctors 



M 



Jv 



(v + 7v)e 4 = a + (v + 7v)(l - e 4 ) 

M B = c + p + /p + e 4 (p + ip) = c+ (1 + e 4 )(p + ip). 
From the bivector condition, we could have selected the 
alternative x = y = 0, that also leads to commuting 
multivectors 

M A = a + v + Iv, M B =c + p + Jp. (20) 

A third type can be found as 

M A = l+(l+e 4 )(u+s7) , M B = l+(l+e 4 )(iu+tJ). (21) 



Derivation of commuting operators in 4D 

We can write a general multivector in four dimensions 

as 

Ma = v + 7w + e 4 (x + Iy) = x 4 + v + e 4 x — iy + Iw — y^I 

(18) 

thus forming the complete set of scalar, vector, bivector, 
trivector and quadvector components, where x and y are 
three- vectors and v, w, x, y are four vectors. We also 
define similarly Mb = p + Iq + e 4 (r + Is) . 

For two four dimensional multivector operators Ma 
and Mb we have the grade selected by brackets () g , where 
g is the multivector grade. Defining the commutator as 
C = M A M B - Mb Ma, we find 

(C) = (19) 
(C)i = —xp4 + V4,r — ivAs — iyAj) 

+e 4 (x - p— v ■ r + W4S4 — y 4 g 4 ) 
(C) 2 = 2(v A p - w A q - x A r - yh s 

+I(x A s + y A r}) 
(C) 3 = IVS4 — ISV4 — iw ■ r + Iruti — e 4 w A s + ix ■ q 

-Ixqi + Iyp 4 - Ipy4 - e 4 y A q 
(C)i = 2I(wp-v-q). 

By inspection of the quadvector and bivector terms we 
identify a solution v = ±w and p = ±q with the con- 
dition —x A f — y A s — and I{x A s + y A r) = 



Alternatively selecting q = w = from the quadvector 
condition, we find the commuting operators 

Ma = b + e 4 (x - Ix) , M B = d + e 4 (r + It). (22) 

These last set of operators are special in that they lie in 
the even subalgebra and so describe pure rotations, that 
is, will rotate a unit four-vector to a unit four-vector. 
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